CVE-2023-49772

CVE-2023-49772 refers to a Deserialization of Untrusted Data vulnerability in the WordPress plugin Genesis Simple Love (Phpbits Creative Studio), affecting versions n/a through 2.0. Connected sources identify the root cause as unauthenticated PHP Object Injection via deserialization of untrusted ...

PT-2023-31342 · Unknown · Genesis Simple Love

Name of the Vulnerable Software and Affected Versions: Genesis Simple Love versions n/a through 2.0 Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security issues when untrusted data is processed by the application. No information is...

SQL Injection Vulnerability in Simple Attendance Management System

Simple Attendance Management System is a simple attendance management system. Simple Attendance Management System suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

WordPress Plugin Genesis Simple Love Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

CVE-2023-50376

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smp7, wp.Insider Simple Membership allows Reflected XSS.This issue affects Simple Membership: from n/a through 4.3.8...

CVE-2023-50376

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smp7, wp.Insider Simple Membership allows Reflected XSS.This issue affects Simple Membership: from n/a through 4.3.8...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smp7, wp.Insider Simple Membership allows Reflected XSS.This issue affects Simple Membership: from n/a through 4.3.8...

CVE-2023-50376

Mode C: Affected software is Simple Membership for WordPress (

CVE-2023-50376 WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smp7, wp.Insider Simple Membership allows Reflected XSS.This issue affects Simple Membership: from n/a through 4.3.8...

SUSE CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS...

WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Cross Site Scripting (XSS)

Software Simple Membership Type Plugin Vulnerable versions = 4.3.8 Fixed in 4.3.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50376 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 779ce9dfa791 Credits Le Ngoc Anh Required privilege...

WordPress Simple Counter Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Simple Counter Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50377 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1fb7d6a42ed0 Credits Khalid Yusuf Required privilege...

WordPress plugin Simple Membership cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2023-6907

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper...

CVE-2023-6907

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper...

Authentication flaw

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper...

CVE-2023-6907

The CVE-2023-6907 entry concerns codelyfe Stupid Simple CMS (versions up to 1.2.4). The vulnerability affects the Deletion Interface’s file-manager delete.php, where manipulation of the file parameter leads to improper authentication. Public exploit details exist, indicating potential exploitatio...

Stupid Simple CMS Authorization Issues Vulnerability

Stupid Simple CMS is a content management system for codelyfe individual developers. Stupid Simple CMS 1.2.4 and earlier versions have an authorization issue vulnerability that stems from the parameter file in the file /file-manager/delete.php that causes incorrect authentication...

CVE-2023-6902

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. This vulnerability affects unknown code of the file /file-manager/upload.php. The manipulation of the argument file leads to unrestricted upload. The exploit has been disclosed to the public and m...

CVE-2023-6902

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. This vulnerability affects unknown code of the file /file-manager/upload.php. The manipulation of the argument file leads to unrestricted upload. The exploit has been disclosed to the public and m...